City: São Paulo
Region: Sao Paulo
Country: Brazil
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 54.20.0.0 - 54.22.255.255
CIDR: 54.22.0.0/16, 54.20.0.0/15
NetName: AMAZO-4
NetHandle: NET-54-20-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Amazon.com, Inc. (AMAZO-4)
RegDate: 2021-12-27
Updated: 2022-10-31
Ref: https://rdap.arin.net/registry/ip/54.20.0.0
OrgName: Amazon.com, Inc.
OrgId: AMAZO-4
Address: Amazon Web Services, Inc.
Address: P.O. Box 81226
City: Seattle
StateProv: WA
PostalCode: 98108-1226
Country: US
RegDate: 2005-09-29
Updated: 2026-04-17
Comment: For details of this service please see
Comment: http://ec2.amazonaws.com
Ref: https://rdap.arin.net/registry/entity/AMAZO-4
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-555-0000
OrgNOCEmail: amzn-noc-contact@amazon.com
OrgNOCRef: https://rdap.arin.net/registry/entity/AANO1-ARIN
OrgRoutingHandle: ARMP-ARIN
OrgRoutingName: AWS RPKI Management POC
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-rpki-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/ARMP-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-555-0000
OrgTechEmail: amzn-noc-contact@amazon.com
OrgTechRef: https://rdap.arin.net/registry/entity/ANO24-ARIN
OrgDNSHandle: DNS1131-ARIN
OrgDNSName: DNS
OrgDNSPhone: +1-202-555-0000
OrgDNSEmail: ipmanagement+dns@amazon.com
OrgDNSRef: https://rdap.arin.net/registry/entity/DNS1131-ARIN
OrgRoutingHandle: IPROU3-ARIN
OrgRoutingName: IP Routing
OrgRoutingPhone: +1-206-555-0000
OrgRoutingEmail: aws-routing-poc@amazon.com
OrgRoutingRef: https://rdap.arin.net/registry/entity/IPROU3-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-555-0000
OrgAbuseEmail: trustandsafety@support.aws.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/AEA8-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 54.20.97.85
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28161
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;54.20.97.85. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026102501 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 26 10:55:07 CST 2026
;; MSG SIZE rcvd: 10485.97.20.54.in-addr.arpa domain name pointer ec2-54-20-97-85.sa-east-1.compute.amazonaws.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
85.97.20.54.in-addr.arpa name = ec2-54-20-97-85.sa-east-1.compute.amazonaws.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 98.226.177.114 | attackspam | SSH/22 MH Probe, BF, Hack - |
2020-07-10 07:37:48 |
| 71.6.233.243 | attackbotsspam | Unauthorised access (Jul 9) SRC=71.6.233.243 LEN=40 TOS=0x10 PREC=0x40 TTL=237 ID=54321 TCP DPT=3389 WINDOW=65535 SYN |
2020-07-10 07:46:49 |
| 106.12.205.137 | attack | Jul 9 22:08:54 IngegnereFirenze sshd[30761]: Failed password for invalid user chl from 106.12.205.137 port 53586 ssh2 ... |
2020-07-10 07:23:16 |
| 216.244.66.196 | attack | 20 attempts against mh-misbehave-ban on twig |
2020-07-10 07:23:50 |
| 39.100.42.194 | attackbots | 2020-07-10T03:17:29.112638billing sshd[25698]: Invalid user sheba from 39.100.42.194 port 60350 2020-07-10T03:17:30.672373billing sshd[25698]: Failed password for invalid user sheba from 39.100.42.194 port 60350 ssh2 2020-07-10T03:18:20.899593billing sshd[27308]: Invalid user guanshuaijie from 39.100.42.194 port 43138 ... |
2020-07-10 07:49:58 |
| 87.110.181.30 | attackbots | SSH Invalid Login |
2020-07-10 07:53:14 |
| 222.186.3.249 | attack | Jul 10 01:46:06 OPSO sshd\[6689\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.3.249 user=root Jul 10 01:46:08 OPSO sshd\[6689\]: Failed password for root from 222.186.3.249 port 40691 ssh2 Jul 10 01:46:10 OPSO sshd\[6689\]: Failed password for root from 222.186.3.249 port 40691 ssh2 Jul 10 01:46:13 OPSO sshd\[6689\]: Failed password for root from 222.186.3.249 port 40691 ssh2 Jul 10 01:47:19 OPSO sshd\[6870\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.3.249 user=root |
2020-07-10 07:55:40 |
| 82.99.206.18 | attackspambots | Jul 9 20:13:26 ws12vmsma01 sshd[16297]: Invalid user shiranami from 82.99.206.18 Jul 9 20:13:28 ws12vmsma01 sshd[16297]: Failed password for invalid user shiranami from 82.99.206.18 port 49612 ssh2 Jul 9 20:16:25 ws12vmsma01 sshd[16908]: Invalid user cara from 82.99.206.18 ... |
2020-07-10 07:39:27 |
| 117.89.134.231 | attackspambots | Jul 9 23:07:43 gospond sshd[7965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.89.134.231 Jul 9 23:07:43 gospond sshd[7965]: Invalid user silvio from 117.89.134.231 port 60253 Jul 9 23:07:45 gospond sshd[7965]: Failed password for invalid user silvio from 117.89.134.231 port 60253 ssh2 ... |
2020-07-10 07:46:30 |
| 111.72.193.203 | attackspam | Jul 9 23:55:55 srv01 postfix/smtpd\[5252\]: warning: unknown\[111.72.193.203\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 23:56:07 srv01 postfix/smtpd\[5252\]: warning: unknown\[111.72.193.203\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 23:56:23 srv01 postfix/smtpd\[5252\]: warning: unknown\[111.72.193.203\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 23:56:41 srv01 postfix/smtpd\[5252\]: warning: unknown\[111.72.193.203\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 9 23:56:53 srv01 postfix/smtpd\[5252\]: warning: unknown\[111.72.193.203\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2020-07-10 07:43:08 |
| 222.186.42.137 | attack | Jul 10 01:44:22 santamaria sshd\[26685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root Jul 10 01:44:24 santamaria sshd\[26685\]: Failed password for root from 222.186.42.137 port 36798 ssh2 Jul 10 01:44:30 santamaria sshd\[26696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.137 user=root ... |
2020-07-10 07:45:26 |
| 94.191.62.179 | attackspambots | 2020-07-10T01:34:53.797624ks3355764 sshd[8096]: Invalid user yhkang from 94.191.62.179 port 41442 2020-07-10T01:34:56.006829ks3355764 sshd[8096]: Failed password for invalid user yhkang from 94.191.62.179 port 41442 ssh2 ... |
2020-07-10 07:47:41 |
| 189.51.203.23 | attackbotsspam | (smtpauth) Failed SMTP AUTH login from 189.51.203.23 (BR/Brazil/23.203.51.189.ns.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-07-10 00:48:51 plain authenticator failed for ([189.51.203.23]) [189.51.203.23]: 535 Incorrect authentication data (set_id=info) |
2020-07-10 07:16:30 |
| 5.188.210.4 | attackspambots | 0,25-01/02 [bc01/m03] PostRequest-Spammer scoring: Lusaka01 |
2020-07-10 07:21:12 |
| 122.117.57.63 | attackspambots | Automatic report - Banned IP Access |
2020-07-10 07:54:44 |